Corporate email infrastructure · hosted in Germany

Your company's email, on your own infrastructure.

tsmart.ai brings domains, users, mailbox migration, a JSON email API for your applications and continuous security audits together in a single admin console. No per-user licences; data stays in the European Union.

Admin console Contact us

A Talya Smart product.

example-company.com Verified

SPF v=spf1 ip4:91.XX.133.XX -all pass
DKIM dkim._domainkey · 2048-bit pass
DMARC v=DMARC1; p=reject; adkim=s; aspf=s pass
Reverse DNS 91.XX.133.XX → mail.tsmart.ai pass
TLS TLS 1.3 · publicly trusted certificate ok
2-step verification all administrators required

Example of the live checks on the console's domain page.

Data in Germany (EU)
TLS 1.2+ with DKIM/DMARC
Mandatory 2-step verification
Daily backups and security audits
Open-source mail stack

Features

One console for the whole group

Every domain, user and application integration across your companies, managed in one place. Nothing more, nothing less.

A console for every company

Each company in the group gets its own workspace at company.tsmart.ai. Company admins see only their own domains and users; the super admin manages the whole group.

admin.tsmart.ai · <company>.tsmart.ai

Domain management

No domain is added without proof of ownership. SPF, DKIM (2048-bit) and DMARC records are prepared in the console and their status is checked live.

SPF · DKIM · DMARC · PTR

Users and groups

Mailboxes, aliases, group addresses, quotas and password resets on one screen. Webmail, calendar and contacts included; IMAP, SMTP and ActiveSync for any client.

Webmail · IMAP · SMTP · ActiveSync

Migration from your current provider

Existing mail is synchronised over IMAP; the source account is never touched. Sync keeps running until cutover day, so switching the MX record causes no gap.

Single user or bulk via CSV

tsmartSend · Email API for your applications

A simple JSON REST API for notifications: POST /emails, POST /emails/batch, GET /emails/:id. Sending only from verified domains, with hourly quotas per workspace.

send.tsmart.ai

Security center

Your code repositories are scanned for vulnerable dependencies, leaked secrets and insecure code; the mail server's daily audit report lives in the same place.

security.tsmart.ai

One platform

One infrastructure instead of two subscriptions

Instead of per-user mailbox licences plus a separate service for application email, the group runs its own server for both.

Mailboxes

Instead of a per-user licensed email suite

Unlimited domains and users; cost follows server capacity, not head count
Webmail, calendar, contacts and mobile sync (ActiveSync) included
Existing mail and folders migrated over IMAP
Group addresses, aliases, auto-replies and quotas
Data in the European Union, administration in one console

Application email

Instead of a separate transactional email service

POST /emails, POST /emails/batch, GET /emails/:id
API keys and hourly quotas per workspace
Sending only from verified domains
Every message logged in the console

# Plain JSON over HTTPS; switch by changing the base URL and key
curl https://send.tsmart.ai/emails \
  -H "Authorization: Bearer ts_…" \
  -H "Content-Type: application/json" \
  -d '{"from":"Notifications <notify@example-company.com>",
       "to":["user@example.com"],
       "subject":"Your request has been received",
       "html":"<p>Hello,</p>"}'

Read the developer documentation

Security

Security is not an add-on

A mail server is the backbone of a company. Every layer is closed by default and tested automatically every day.

Mandatory 2-step verification Time-based one-time codes for every admin account; the temporary password must be changed at first sign-in and sessions are kept server-side.
Console reachable only through the edge proxy The admin interface and the API accept only signed requests coming through the edge network; mail traffic never passes through it.
Daily security audit Open relay, authentication, TLS, blocklists, patches and image vulnerabilities are tested automatically every day; any deviation raises an alert.
Layered mail protection Spam and virus filtering, TLS 1.2+ enforced, DKIM signing and strict DMARC close the door on spoofing.
Tamper-evident audit trail Every action in the console is written to a hash-chained audit log that cannot be altered afterwards.
Infrastructure as code Server, firewall and DNS records are managed as code; the state file is encrypted and no secret is kept in the repository.

Migration

From your current provider in three steps

Zero-downtime cutover: old and new systems run side by side for a while, and the MX record is the last thing to change.

Verify the domain

Add the domain in the console and publish the given TXT record in DNS. The DKIM key and SPF/DMARC suggestions are prepared automatically.

Create users and sync mail

Create users one by one or in bulk via CSV. Start the IMAP sync with an app password; folders and read states are preserved.

Switch the MX record

With the sync up to date, point MX at mail.tsmart.ai. Remaining mail keeps syncing for a while; then close the old subscription.

FAQ

Frequently asked questions

Where is our data stored?

On dedicated servers in a data centre in Germany (EU), operated by Talya Smart. Mail traffic (SMTP/IMAP) goes directly to the server; only the admin console is served through an edge proxy.

How does migration from our current provider work?

First the domain is verified in tsmart.ai and users are created. Mail is then synchronised from the existing accounts over IMAP; nothing is deleted at the source. On cutover day the MX record is switched, sync continues for a while longer and is then stopped.

Our apps already use a transactional email API. What changes?

Only the base URL and the API key. POST /emails, POST /emails/batch and GET /emails/:id accept and return plain JSON. Sending is limited to domains verified in the console.

Who can use it?

tsmart.ai is a private platform operated for Talya Smart group companies and partners; there is no public sign-up. Get in touch for access.

How do I report a security issue?

Write to security@talyasmart.com. We take every report seriously and keep you informed until confirmed findings are closed.

Let's plan the rollout for your group

Tell us about your domains, user count and migration timeline and we will plan it together.

info@talyasmart.com talyasmart.com